What is claimed is: 

1 . Arandom sequence generating apparatus for generating a sequence of integers 

of w bits, comprising: 

a seed receiving section vwhich receives a sequence of integers Si, S2, .... ■ ■, Sm of 

5 w bits as a seed for integers n and m(l<n<m-l); 

an initialization section which provides a transformation section with said received 

sequence of integers s,,S2 s„, s™ as an integer sequence Xi, X2, x„, x„; 

said transformation section which performs predetermined transformation on each 
of said provided integer sequence x,.X2. ....x„, x„ to acquire a sequence of integers y,. 

10 y2,...,yn,-.ymOfwbits; 

aiotationsection which acquires a number of rotation bits from said sequence of 

integers y„*,, ... y™, performs a rotation operation on said acquired number of rotation bits 
with respect to all of or apart of said sequence of integers yi, yz, .... Yn, ym taken as a bit 
sequence of wm bits, and acquires a sequence of integers 2i, Za, z„, of w bits from 
15 said acquired bit sequence of wm bits; 

an updating section vyhich provides said transformation section Avith said sequence 
of integers z,, z,, 2„, Zm as said integer sequence xi , xa, x„, x„; and 

an output section which ouQjuts a sequence of integers Zi, zi, Zn or z^i, .... 2^ 
obtained last as a random sequence n, rz. r„ or n, r„.. respectively in case where 
2 0 transformation in said transformation section and rotation in said rotation section are 
repeated a predetermined number of times. 

2. The random sequence generating apparatus according to claim 1 , wherein said 
transformation section performs transfomiation by recursion formulae given below for an 
integer i (1 <i<m -l) using mapping g(-, •) 

25 yi = g(Xni,Xi) 

yi+i = g(Xi,Xi+i)- 

3. The random sequence generating apparatus according to claim 1 , wherein said 
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^3nsf6nnationsectionpexfom.Wom«tionby^^^^^ 

integer i using a predetermined integer c and mapping g(-. 0 

yi = B(c,xi) 

4. ^random sequence generating apparatus according to claim 1, v^herdnsaid 
transformationsec^onperfom.transformationbyrecuxsionf^^^^^ 

integer i (l^i^-l) xising mapping g(-, •) 
yi==g(c,xi) 
Yi+i " g(Xj, Xh-O- 

5. Therandomsequencegei.eratingapparatusaccordingix.cl^l.whereinsaid 

mapping g(-, ) is defined as 

g(a, b) = 2b^ + h(a)b + q(mod 2*) 
from predetermined mapping hO and a predetennined integer q (O^^""^). 

6. mrandomsequencegeneratingapparatusaccordingtoclaimS.whereins^d 

mapping h( ) is defined as 
h(a) = a. 

7. mrandomsequencegeneratingapparatusaccordingtoclaim5.whereinsaid 
mapping h(.) is defined by an operation of clearing a predetermined bit in a numerical 
expression of a given value. 

^ing h(.) ,3 dcfit»a by an opc«ian of mve«iBg a pn=de«nni=»l bi, in a numerical 

expression of a given value. 

9. m random sequence generating apparatus accordix^ to claim 5, wherein said 
mappinghCOisdefinedbyanoperationofsettingOl to least significant two bits ina 

numerical expression of a gjven value. 

10. Tbe random sequence generating apparatus according to claim 1, wherein 
taldng said sequenceofinteg.rsy.....y«asabit sequence ofw(m-n)bits.^dro^^^ 
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-section acquires, as said number of rotation bits, an integer value equivalent to a bit 
sequence taken as an integer and obtained by arranging at least one bit at a predetermined 

position extracted from said bit sequence. 

11. TherandomsequencegeneratingapparatusaccordingtoclaimlO, wherein 

taking said sequence of integers y.u ... y« as abit sequence of w(m-n) bits, said rotation 
section detemiines a direction of rotation based on a value of a bit at a predetemuned 

position in said bit sequence. 

12. The random sequence generating apparatus accorfing to claim 1, wherdn sdd 
rotation section acquires a number of rotation bits from said sequence of integers y„.i, ... yn. 
perfomis a rotation operation on said acquired number of rotation bits with respect to said 
sequence of integers y,. y^, y. y-n taken as abit sequence of wn bits, acquires a 
sequence of integers ....z„ofw bits from said acquired bit sequence of wn bits, 
performs arotation operation on said acquired number of rotation bits wilhrespectto said 

sequence of integers y^., y„ taken as a bit sequence of v<m-n) bits, and acquires a 

sequence of integers z^u 2« of w bits from said acquired bit sequence of w(m.n) bits. 

13. An encryption/decryption apparatus comprising: 

arandom sequence generating section which generates arandom sequence n, ra, .... 
r„ by means of a random sequence generating apparatus recited in claim 1 ; 

amessagerecdvingsectionwhichreceivesasequenceof integerspi,P2, ...of w 

bits as a message; and 

an encryption/decryption section which outputs a sequence of integers px xor r,, P2 

xor ra, .... Pi xor r«H-»-)) o) . . as a result of encryption or decryption. 

14. Arandomsequencegeneratingmethodforgeneratingasequenceofintegersof 

whits, comprising: 

a seed receiving step which receives a sequence of integers si, sj s„ s« of w 

bits as a seed for integers n and m (l<n<m-l); 

an initialization step which provides a transformation step witii said reived 
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sequence of integers s,, Sz, .... s„ s™ as an integer sequence Xi, Xj, .... x„, x„; 

said.transfonnation step which perfonns predetennined transfoimation on each of 
said provided integer sequence xi, xj. .... x„, .... x„ to acquire a sequence of integers y,. 
y2,...,yn,-,ymofwbits; 

a rotation step which acquires a number of rotation bits from said sequence of 
integers y„*,. .., performs a rotation operation on said acquired number of rotation bits 
with respect to aU of or a part of said sequence of integws yi, yz, yn, Ym takai as abit 
sequence of wm bits, and acquires a sequence of integers zi, zj, Zo, Zm of w bits from 
said acquired bit sequence of wm bits; 

an vqjdaling step which provides said transformation step with said sequence of 

integers Zi, za, .... z„ Zn. as said integer sequence X2 Xn, .... x,n; and 

an output step which outputs a sequence of integers zi, Z2, .... Zn or Zn*-!, .... Zm 
obtained last as a random sequence r,. r^, .... r„ or r,, .... r„.„ respectively in case where 
trmsfotmation in said transformation step and rotation in said rotation step are repeated a 
predetermined nvimber of times. 

15. The random sequence generating melhod according to claim 14, wherein said 
transfoimation step performs transformation by recursion formulae given below for an 
integer i (l^i^rl) using maj)ping g(-, •) 

yi = g(Xm,xi) 
yi+i = g(Xb Xtf i). 

16. The random sequence generating method according to claim 14, wherein said 
iransformation step performs transformation by recursion formulae given below for an 
integer i (l^iSm-1) using a predetermined integer c and mapping g(-, •) 

yi = g(c,xi) 

yi+i = g(yu Xi+i). 

1 7. The random sequence generating method according to claim 14, whea-ein said 
transformation step performs transformation by recursion fonnulae given below for an 



integer i (l<i<m-l) vising mapping g(-, 
yi = g(c,xO 
yi+i = g(xi,XtKi> 

18. The random sequence generating method according to claim 15, wherein said 

mapping g(-, •) is defined as 

g(a, b) = 2b^ + h(a)b + q(mod 2^ 
from predetemiined mapping hO) and a predetermined integer q (0^^"*'^). 

19. The random sequence generating method according to claim 18, wherein said 
mapping h( ) is defined as 

h(a) = a. 

20. The random sequence generating method according to claim 1 8, wherein said 
mapping h( ) is defined by an operation of clearing a predetermined bit in a numerical 
expression of a given value. 

21. The random sequence generating method according to claim 1 8, wherein said 
mspping h(-) is defined by an operation of inverting a predetermined bit in a numerical 
expression of a given value. 

22. The random sequence genemting method according to claim 18, wherein said 
mapping hO) is defined by an operation of setting 01 to least significant two bits in a 
numerical expression of a given value. 

23. Tbe random sequoice generating method according to claim 14, wherein 
taking said sequence of integers y^^-i, y™ as a bit sequence of w(m-n) bits, said rotation 
step acquires, as said number of rotation bits, an integer value equivalent to a bit sequence 
taken as an integer and obtained by arranging at least one bit at a predetermined position 
extracted fi-om said bit sequence. 

24. Tbte random sequence generating method according to claim 23, wherein 
takmg said sequence of integers yn+i, .., Vm as a bit sequence of w(m-n) bits, said rotation 
step determines a direction of rotation based on a value of a bit at a predetennined position 



in said bit sequence. 

25. TTieiandomsequencegenemtingmelhodaccoidingtoclaimM.whereinsai^ 
rotation step acquires a nmnber of rotation bits from said sequence of integers y^,, ... ym, 
performs a rotation operation on said acquired number of rotation bits with respect to said 
5 sequence of integers y„ y^, ... y„, Yn. taken as abit sequence of vm bits, acquires a 
sequence of integers zuZi, .... 2„ of wbits from said acquired bit sequence of bits, 
perfomis a rotation operation on said acquired number of rotation bits with respectto said 
sequence of integers y^u .... yc taken as a bit sequence of w(m-n) bits, and acquires a 

sequence of integers z^, z«. of w bits from said acquired bit sequence of w(m-n) bits. 

10 26. An encryption/decryption method comprising: 

a random sequence generating step which generates a random sequence tu t2, r„ 
by means of arandom sequence generating apparatus recited in claim 14; 

a message receiving step which receives a sequence of integers pi. P2, ... of w bits 
as a message; and 

an encryption/decryption step which outputs a sequence of integers p, xor n, p2 xor 
T2, Pi xor r(Cr^i)n,odn)* 1 as aresult of encryption or decryption. 

27. Aprogram which allows a computer to ftinction as a random sequence 

generating apparatus as recited in claim 1 . 

28. AprogramwhichaUowsacomputertofunctionasanencryption/deCTyption 

2 0 apparatus as recited in claim 13. 
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